CVE-2010-0388

Format string vulnerability in the WebDAV implementation in webservd in Sun Java System Web Server 7.0 Update 6 allows remote attackers to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in the encoding attribute of the XML declaration in a PROPFIND request.

Affected products

Sun Java System Web Server

Sun Java System Web Server

= 7.0

CVSS 2.0

7.5 HIGH

EPSS

7.2% (94th percentile)

Weakness

CWE-134

NVD status

Modified

Published

2010-01-25